The blame should be on MS here. Why does this OS happily run unsigned executables from random sites, random emails, etc? The days where that's a common use case

The blame should be on MS here. Why does this OS happily run unsigned executables from random sites, random emails, etc? The days where that's a common use case are long behind us and for legitimate uses, end users can go into the control panel and whitelist exe's on a per exe basis. Its way, way too easy to fool a Windows user into running your code.